CVE-2025-9837: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in itsourcecode Student Information Management System 1.0. This issue affects some unknown processing of the file /admin/modules/student/index.php. This manipulation of the argument studentId causes sql injection. The attack may be initiated remotely. The exploit ha...

CVE-2024-33992 Cross-Site Scripting (XSS) vulnerability in Janobe School Event Management System

Cross-Site Scripting XSS vulnerability in School Event Management System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the 'view' parameter in '/student/index.php'...

CVE-2024-33992: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting XSS vulnerability in School Event Management System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the 'view' parameter in '/student/index.php'...

PT-2019-9631

Name of the Vulnerable Software and Affected Versions Attendance Monitoring System version 1.0 Description The issue concerns a SQL Injection flaw. It affects the id parameter in several API endpoints: "student/index.php?view=view", "event/index.php?view=view", and "user/index.php?view=view"...

CVE-2018-18798: Improper Neutralization of Special Elements used in an SQL Command

Attendance Monitoring System 1.0 has SQL Injection via the 'id' parameter to student/index.php?view=view, event/index.php?view=view, and user/index.php?view=view...

CVE-2018-18801

The BSEN Ordering software 1.0 has SQL Injection via student/index.php?view=view&id=SQL or index.php?q=single-item&id=SQL...

CVE-2018-18801

The BSEN Ordering software 1.0 has SQL Injection via student/index.php?view=view&id=SQL or index.php?q=single-item&id=SQL...

PT-2018-14659

Name of the Vulnerable Software and Affected Versions School Event Management System version 1.0 Description The issue is related to SQL Injection, which can be exploited via the id parameter in the "student/index.php" or "event/index.php" API endpoints. Recommendations For School Event Managemen...

CVE-2018-18795: Improper Neutralization of Special Elements used in an SQL Command

School Event Management System 1.0 has SQL Injection via the student/index.php or event/index.php id parameter...

CVE-2018-18801: Improper Neutralization of Special Elements used in an SQL Command

The BSEN Ordering software 1.0 has SQL Injection via student/index.php?view=view&id=SQL or index.php?q=single-item&id=SQL...